Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g8coECa-l4ql5vxSiCLPG0o7Big.roa
File:                     g8coECa-l4ql5vxSiCLPG0o7Big.roa (raw, json)
Hash identifier:          EH8kN6Lbzvom+UA1aN3MFVQs+y3dz+lvnJ+mYprpnwg=
Subject key identifier:   83:C7:28:10:26:BE:97:8A:A5:E6:FC:52:88:22:CF:1B:4A:3B:06:28
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1841
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g8coECa-l4ql5vxSiCLPG0o7Big.roa
Signing time:             Sun 07 Feb 2021 12:27:41 +0000
ROA not before:           Sun 07 Feb 2021 12:27:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6209 (0x1841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:27:41 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=83C7281026BE978AA5E6FC528822CF1B4A3B0628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:b0:bd:b7:be:00:a0:ee:67:7a:a5:b4:50:
                    de:28:fb:d1:df:28:7f:0d:44:06:1f:bb:98:5b:74:
                    8a:37:9c:46:1a:10:db:a2:64:74:c0:d6:86:a7:4b:
                    28:8a:a3:34:87:b2:c9:54:4d:bc:1e:98:74:b7:fa:
                    df:08:9f:e6:b3:78:e8:01:89:37:1a:cc:4d:a7:d6:
                    d0:6a:96:91:f1:da:3b:79:13:06:9f:d5:ac:97:f1:
                    93:6c:7c:da:14:a4:47:05:a7:61:17:68:bd:60:ee:
                    fa:33:74:60:a4:42:a5:04:13:40:2a:28:2e:71:90:
                    b6:2f:df:8e:4f:69:f8:0f:47:6f:9c:25:74:60:e0:
                    18:6c:ce:18:2f:ff:31:b1:a4:28:63:a1:b5:88:95:
                    99:6d:c5:63:a3:cd:85:2e:51:11:27:a7:b6:6f:74:
                    9c:2b:f4:54:9f:d3:c0:84:46:3b:15:6c:04:9e:db:
                    db:dc:2e:e4:5a:28:8e:2c:01:00:3d:c6:e3:be:5e:
                    46:ae:8c:6d:c7:e4:47:32:63:f1:40:53:36:a1:35:
                    e8:07:60:2f:74:b1:42:d3:e8:6a:44:c3:6b:a3:91:
                    77:43:5c:1f:f9:7c:1b:6c:c5:4d:96:76:2e:33:a6:
                    98:76:c5:a0:52:6d:c0:10:c2:6d:bb:cf:37:5d:a1:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:28:10:26:BE:97:8A:A5:E6:FC:52:88:22:CF:1B:4A:3B:06:28
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g8coECa-l4ql5vxSiCLPG0o7Big.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:1b:0f:04:2f:ce:f4:31:ad:4a:0c:7d:cf:08:1c:70:73:
         e5:d5:19:3f:29:1b:63:ea:71:22:f6:aa:28:a2:b9:36:6f:31:
         26:42:05:3e:d2:b7:09:b1:97:99:7a:73:03:10:e4:3a:f6:5b:
         dc:58:19:bc:6d:2b:51:f3:dc:6d:b3:5a:90:3e:9c:1d:c7:32:
         2a:1a:01:4d:cd:c0:52:dd:43:dc:ed:9b:3c:48:89:45:85:f4:
         3d:a7:e7:90:6f:b6:e5:e2:d4:ef:23:19:42:25:cd:bd:b9:56:
         91:96:d1:8d:35:fe:f9:f7:96:04:92:ea:00:99:57:6b:bb:e5:
         57:e5:7d:e1:de:b8:f5:79:68:20:2c:04:28:e6:7a:23:a2:f3:
         ee:41:27:47:d8:aa:9b:fe:8c:99:b3:67:90:8d:96:b8:01:1c:
         07:35:5d:c6:58:58:fd:b2:d8:15:28:e3:5d:6c:9d:b0:2f:cc:
         67:df:7a:39:34:48:b8:b4:a2:d5:85:9e:61:0f:c8:02:a4:4a:
         b3:d8:98:98:62:3e:13:f7:2a:e6:f8:0d:71:fa:e1:58:19:0d:
         3a:25:f4:76:ee:4f:f2:20:ee:74:94:02:33:e7:29:10:13:7b:
         66:c3:92:ab:e1:88:99:6c:00:c6:d3:59:6a:f3:36:67:db:99:
         44:f9:8b:0b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI3NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgzQzcyODEwMjZCRTk3
OEFBNUU2RkM1Mjg4MjJDRjFCNEEzQjA2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoK7C9t74AoO5neqW0UN4o+9HfKH8NRAYfu5hbdIo3nEYaENui
ZHTA1oanSyiKozSHsslUTbwemHS3+t8In+azeOgBiTcazE2n1tBqlpHx2jt5Ewaf
1ayX8ZNsfNoUpEcFp2EXaL1g7vozdGCkQqUEE0AqKC5xkLYv345PafgPR2+cJXRg
4Bhszhgv/zGxpChjobWIlZltxWOjzYUuUREnp7ZvdJwr9FSf08CERjsVbASe29vc
LuRaKI4sAQA9xuO+XkaujG3H5EcyY/FAUzahNegHYC90sULT6GpEw2ujkXdDXB/5
fBtsxU2Wdi4zpph2xaBSbcAQwm27zzddoZNPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUg8coECa+l4ql5vxSiCLPG0o7BigwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2c4Y29FQ2EtbDRxbDV2eFNp
Q0xQRzBvN0JpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6E4wDQYJKoZIhvcNAQELBQADggEBAIrdGw8EL870Ma1KDH3PCBxwc+XVGT8pG2Pq
cSL2qiiiuTZvMSZCBT7Stwmxl5l6cwMQ5Dr2W9xYGbxtK1Hz3G2zWpA+nB3HMioa
AU3NwFLdQ9ztmzxIiUWF9D2n55BvtuXi1O8jGUIlzb25VpGW0Y01/vn3lgSS6gCZ
V2u75VflfeHeuPV5aCAsBCjmeiOi8+5BJ0fYqpv+jJmzZ5CNlrgBHAc1XcZYWP2y
2BUo411snbAvzGffejk0SLi0otWFnmEPyAKkSrPYmJhiPhP3Kub4DXH64VgZDTol
9HbuT/Ig7nSUAjPnKRATe2bDkqvhiJlsAMbTWWrzNmfbmUT5iws=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org